--- title: PHP Compatibility Requirements description: Datadog, the leading service for cloud-scale monitoring. breadcrumbs: >- Docs > Datadog Security > App and API Protection > Enabling App and API Protection > Compatibility Requirements > PHP Compatibility Requirements --- # PHP Compatibility Requirements {% callout %} # Important note for users on the following Datadog sites: app.ddog-gov.com {% alert level="danger" %} This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site). (). {% /alert %} {% /callout %} ## App and API Protection capabilities support{% #app-and-api-protection-capabilities-support %} The following App and API Protection capabilities are supported in the PHP library, for the specified tracer version: | App and API Protection capability | Minimum PHP tracer version | | -------------------------------------- | -------------------------- | | Threat Detection | 0.84.0 | | Threat Protection | 0.86.0 | | Customize response to blocked requests | 0.86.0 | | Automatic user activity event tracking | 0.89.0 | | API Security | 0.98.0 | The minimum tracer version to get all supported AAP capabilities for PHP is 0.98.0. {% alert level="info" %} If you would like to see support added for any of the unsupported capabilities, let us know! Fill out [this short form to send details](https://forms.gle/gHrxGQMEnAobukfn7). {% /alert %} ### Supported deployment types{% #supported-deployment-types %} | Type | Threat Detection support | | ----------- | ------------------------ | | Docker | yes | | Kubernetes | yes | | Amazon ECS | yes | | AWS Fargate | yes | | AWS Lambda | ## Language and framework compatibility{% #language-and-framework-compatibility %} {% alert level="info" %} **Note:** It's recommended to use [officially supported versions](https://www.php.net/supported-versions) of PHP, especially 8.0, 8.1 and 8.2. {% /alert %} | PHP Version | Support level | Package version | | ----------- | -------------------- | --------------- | | 8.3.x | General Availability | \> `0.95.0+` | | 8.2.x | General Availability | \> `0.82.0+` | | 8.1.x | General Availability | \> `0.66.0+` | | 8.0.x | General Availability | \> `0.52.0+` | | 7.4.x | General Availability | All | | 7.3.x | General Availability | All | | 7.2.x | General Availability | All | | 7.1.x | General Availability | All | | 7.0.x | General Availability | All | App and API Protection capabililties for PHP support the following SAPI's: | SAPI | Support type | | -------------- | --------------- | | apache2handler | Fully Supported | | cli | Fully Supported | | fpm-fcgi | Fully Supported | | cgi-fcgi | Fully Supported | | FrankenPHP | Fully Supported | ## Supported processor architectures{% #supported-processor-architectures %} App and API Protection capabililties for PHP support the following architectures: | Processor architectures | Support level | Package version | | -------------------------------------- | ------------- | --------------- | | Linux GNU amd64 (`x86-64-linux-gnu`) | GA | All | | Linux MUSL amd64 (`x86-64-linux-musl`) | GA | All | | Linux GNU arm64 (aarch64-linux-gnu) | GA | \> `0.95.0` | | Linux MUSL arm64 (aarch64-linux-musl) | GA | \> `0.95.0` | | Windows | Not supported | The Datadog PHP library supports PHP version 7.0 and above on the following architectures: - Linux (GNU) x86-64 and arm64 - Alpine Linux (musl) x86-64 and arm64 The library supports the use of all PHP frameworks, and also the use of no framework. ### Web framework compatibility{% #web-framework-compatibility %} - Attacker source HTTP request details - Tags for the HTTP request (status code, method, etc) - Distributed Tracing to see attack flows through your applications ##### App and API Protection Capability Notes{% #app-and-api-protection-capability-notes %} The following frameworks aren't directly instrumented by App and API Protection, but indirectly supported through runtime instrumentation. | Framework | Versions | Threat Detection supported? | Threat Protection supported? | | ----------- | --------------------------------------------- | --------------------------- | ---------------------------- | | CakePHP | 2.x | yes | yes | | CodeIgniter | 2.x | yes | yes | | FuelPHP | 1.1 | yes | yes | | Laravel | 4.2, 5.x, 6.x, 8.x(tracer 0.52.0+), 9.x, 10.x | yes | yes | | Lumen | 1.9-2.29 | yes | yes | | Magento | 3.8+ | yes | yes | | Neos Flow | 3.0.x | yes | yes | | Phalcon | 3.1+ | yes | yes | | Slim | 3.1+ | yes | yes | | Symfony | 3.1+, 4.x, 5.x, 6.x | yes | yes | | Wordpress | 3.1+, 4.x, 5.x, 6.x | yes | yes | | Yii | 3.1+ | yes | yes | | Zend | 3.1+ | yes | yes | | RoadRunner | 2.x | yes | yes | ### Data store compatibility{% #data-store-compatibility %} **Datastore tracing provides:** - SQL attack detection - query info (for example, a sanitized query string) - error and stacktrace capturing ##### App and API Protection Capability Notes{% #app-and-api-protection-capability-notes-1 %} - **Threat Protection** also works at the HTTP request (input) layer, and so works for all databases by default, even those not listed in the table below. | Framework | Versions | Threat Detection supported? | Threat Protection supported? | | ---------- | -------------------------- | --------------------------- | ---------------------------- | | Amazon RDS | Any supported PHP | yes | yes | | Eloquent | Laravel supported versions | yes | yes | | Memcached | Any supported PHP | yes | yes | | MySQLi | Any supported PHP | yes | yes | | PDO | Any supported PHP | yes | yes | | PHPRedis | 3, 4, 5 | yes | yes | | Predis | 1.1 | yes | yes | ### User Authentication Frameworks compatibility{% #user-authentication-frameworks-compatibility %} **Integrations to User Authentication Frameworks provide:** - User login events, including the user IDs - Account Takeover detection monitoring for user login events | Framework | Minimum Framework Version | | --------- | ------------------------- | | Laravel | 4.2 | | Symfony | 3.3 | | Wordpress | 4.8 |